Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Security Service Edge Engineer (Prisma Access SASE) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Should be C: The Question is asking how the traffic is send to the PA FW not how to configure it. You may configure it with contracts but the traffic is directed to the PA FW with a PBR. "traffic is sent to the firewall with a policy-based redirect (PBR)" "For east-west traffic, define a bridge domain and subnet in the ACI fabric for the firewall. Configure contracts between EPGs that send traffic to the firewall using a PBR. The PBR forwards traffic to the firewall based on policy containg the firewall’s IP and MAC address." Src: https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-a-firewall-in-cisco-aci/palo-alto-firewall-integration-with-cisco-aci-overview
This is one of those purposly missleading questions. "ON" PA FW you use PBR, but here is "TO" PA so I would go for A
Cisco ACI uses contract to tie in external security appliances